Effective awareness.
WHAT TO TEACH
That messages can look completely genuine That verification is always acceptable The specific procedures for money and access What to do when unsure
WHAT NOT TO TEACH
To look for spelling errors.
That advice is obsolete and produces false confidence.
WHAT TO PRACTISE
Real scenarios: a payment change request, an urgent instruction, a caller asking for access.
WHAT TO PROVIDE
Written procedures Known contact numbers for suppliers and colleagues Someone to ask
THE SOMEONE-TO-ASK POINT
Most important. Uncertainty with nobody to ask produces a guess.
HOW OFTEN
Briefly and regularly beats a long session annually.
WHAT TONE TO USE
Practical, not alarming.
Fear produces paralysis or avoidance, not vigilance.
WHAT TO CELEBRATE
Someone reporting a suspicious message.
Thank them, publicly.
WHAT NEVER TO DO
Blame someone who fell for something.
